Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CPUID Supply Chain Breach: Detecting STX RAT in Trojanized CPU-Z and HWMonitor Installers
Executive Summary A critical supply-chain attack has been confirmed against CPUID, the developer of the ubiquitous system diagnostics tools ...
CVE-2021-22681: Rockwell Automation Logix Exploitation – IOCONTROL and IRGC Threats
Introduction The escalation from website defacement to kinetic-adjacent sabotage is complete. The Iran-affiliated threat group CyberAv3ngers...
Rapid7 MDR for Microsoft: Q1 2026 Telemetry Correlation Analysis
Introduction In Q1 2026, Rapid7 released significant updates under the "Cloud Dancer" initiative, most notably the expansion of Managed Dete...
Elastic Cloud SIEM Abused for Data Exfiltration: Detection and Hunting Guide
Introduction Huntress researchers have uncovered a concerning campaign where threat actors actively leverage security vulnerabilities to exf...
ClickFix Social Engineering Campaign: Fake Claude Installer Detection and Defense
Introduction Social engineering remains one of the most effective initial access vectors for threat actors, and the recent resurgence of "Cl...
AI-Driven MDR in 2026: Strategies for Full Telemetry Visibility and Detection Automation
Introduction In a recent episode of Rapid7’s Experts on Experts, CEO Corey Thomas highlighted a critical evolution in security operations th...
CVE-2025-59718: FortiGate SSO Login Bypass — Detection and Containment Guide
CVE-2025-59718: FortiGate SSO Login Bypass — Detection and Containment Guide Introduction Rapid7's recent Incident Response (IR) engagement ...
Siemens SICAM 8: CVE-2026-27663 & CVE-2026-27664 Detection and Remediation
Introduction CISA has released ICS Advisory ICSA-26-092-01 regarding critical vulnerabilities affecting multiple Siemens SICAM 8 products. T...
Rapid7 2026 Global Cybersecurity Summit: Shifting from Reactive Defense to Preemptive Security Operations
Rapid7 2026 Global Cybersecurity Summit: Shifting from Reactive Defense to Preemptive Security Operations Introduction The cybersecurity lan...